About the role
ResponsibilitiesReview and manage DLP alerts.Conducts DLP event investigations and provides escalation management.Identifies DLP ruleset tuning opportunities and communicates the recommendations.Understand technology infrastructure and operational processes in order to enable a more effective response process.Creates operational runbooks and response processes and procedures.Effectively investigative and conduct root cause analysis, identifying indicators of attack or compromise, attack vectors.Deliver verbal and written reports as needed.Participates in on-call rotation (including weekends) to ensure continuous operations.Participates in internal incident response exercises and drills.
Qualifications5+ years’ experience in areas of DLP, data classification, and/or data protection.OC, DLP, Incident Response EngineerHands-on experience with SIEM, IDS/IPS, EDR, and other security technologies.Experience with Unix/Linux/Windows Operating Systems.Excellent written and verbal communication skills, with experience presenting technical information to both technical and non-technical audiences.Bachelor’s Degree in Cybersecurity, Risk Analysis, Computer Science, Information Systems or other related field, or equivalent work experience.